Privacy Policy

Effective date: 29 September 2026 · Last updated: 29 September 2026

Kashmir Travel Company (“we”, “us”, “our”) respects your privacy. This policy explains how we collect, use, store, and share personal data when you use our website, enquire about trips, or travel with us. It is written to align with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and related rules.

1. Who we are

Kashmir Travel Company is a travel and hospitality business based in Srinagar, Jammu & Kashmir, India. We design and operate Kashmir holidays, transfers, and related travel services.

For privacy requests, contact us at info@kashmirtravelcompany.com.

2. Personal data we collect

Depending on how you interact with us, we may collect:

  • Identity & contact: name, email address, phone / WhatsApp number, city or country of residence.
  • Trip details: travel dates, group size, preferred destinations, budget range, special requests, and notes you submit in enquire, plan, feedback, or lead forms.
  • Booking & travel: passenger names, ages or date of birth where needed for hotels or permits, ID details only when a supplier or regulation requires them, flight or arrival information you share, and preferences (dietary, accessibility, room type).
  • Payment-related: payment status, amount, and reference IDs. Card or UPI credentials are handled by payment providers — we do not store full card numbers on our servers.
  • Technical & usage: IP address, browser type, device/OS hints, pages visited, referrer, and cookie or similar identifiers needed for security and basic analytics.
  • Communications: emails, messages, and call notes related to your enquiry or trip.

We do not intentionally collect sensitive personal data beyond what you choose to share for trip planning (for example accessibility or dietary needs). Please avoid sending unnecessary government ID images unless we specifically request them for a booking.

3. Purpose of processing

We use personal data to:

  • Respond to enquiries, prepare quotes and itineraries, and manage confirmed bookings.
  • Coordinate hotels, transport, guides, and other suppliers on your behalf.
  • Send trip updates, weather or road advisories, and operational messages.
  • Process payments and issue invoices or receipts where applicable.
  • Improve our website, prevent fraud and abuse, and keep systems secure.
  • Send offers or newsletters only if you opt in or where permitted; you can unsubscribe at any time.
  • Comply with legal, tax, and accounting obligations.

4. Legal basis (DPDP)

Under the DPDP Act, we process digital personal data primarily on the basis of your consent (for example when you submit a form or accept cookies that are not strictly necessary) and for legitimate uses recognised by law, including:

  • Performing a contract or taking steps at your request before a contract (quotes, bookings, trip delivery).
  • Employment or business purposes as applicable to our staff and vendors.
  • Compliance with law, court orders, or regulatory requirements.
  • Medical emergencies or other situations where processing is necessary to protect life or for public interest as defined in applicable law.

You may withdraw consent for optional processing (such as marketing) by contacting us. Withdrawal does not affect processing already completed or processing we must continue for legal or contractual reasons.

5. Retention

We keep personal data only as long as needed for the purposes above:

  • Enquiries without a booking: typically up to 24 months, then deleted or anonymised unless you ask us to keep planning notes.
  • Confirmed bookings: for the trip period plus a reasonable period for follow-up, complaints, and accounting (often up to 7 years where tax or commercial records require it).
  • Marketing lists: until you unsubscribe or we purge inactive contacts.
  • Security logs: for shorter operational windows unless needed for an investigation.

6. Sharing and processors

We do not sell your personal data. We may share it with:

  • Travel suppliers (hotels, cab partners, houseboats, activity operators, airlines or permit offices) as needed to deliver your trip.
  • Service providers who host our website, email, SMS/WhatsApp tools, analytics, or payment gateways, under confidentiality and purpose limits.
  • Professional advisers (accountants, lawyers, insurers) when reasonably required.
  • Authorities when required by law or to protect rights, safety, or security.

Some processors may store or process data outside India. Where that happens, we take reasonable steps consistent with applicable law to protect your data.

7. Cookies and similar technologies

We use cookies and similar technologies for essential site functions (security, session, load balancing), preferences (for example cookie consent or accessibility settings), and limited analytics to understand how the site is used. You can control cookies through your browser settings. Our on-site notice lets you acknowledge this policy; blocking cookies in your browser may limit some features.

8. Security

We use reasonable technical and organisational measures — including access controls, HTTPS where configured, and staff need-to-know limits — to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure; please use strong passwords for any accounts and share sensitive documents only through channels we confirm.

9. Your rights — access, correction, and deletion

Subject to the DPDP Act and other applicable law, you may request to:

  • Access a summary of personal data we hold about you and the processing activities.
  • Correct inaccurate or incomplete personal data.
  • Erase personal data that is no longer needed for the stated purpose, or where you withdraw consent for optional processing (subject to legal retention needs).
  • Withdraw consent for marketing or other consent-based processing.
  • Nominate another person to exercise rights on your behalf where the law allows.

To exercise these rights, email info@kashmirtravelcompany.com with “Privacy request” in the subject and enough detail for us to verify and locate your records. We will respond within a reasonable period as required by law. You may also lodge a complaint with the Data Protection Board of India once operational mechanisms are available.

10. Children

Our services are aimed at adults planning travel. We do not knowingly collect personal data from children under 18 for marketing. Trip bookings may include children’s names or ages as provided by a parent or guardian for hotel or activity requirements. If you believe we have collected a child’s data inappropriately, contact us and we will take appropriate steps.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes will be posted on this page; continued use of the site after updates constitutes notice of the revised policy where permitted by law.

12. Contact

Kashmir Travel Company
Srinagar, Jammu & Kashmir, India
Email: info@kashmirtravelcompany.com

Related pages: Terms of Service · Travel Policies · Accessibility